{
    "type": "bundle",
    "id": "bundle--51893872-73ab-4726-a42e-cb3941a538ea",
    "objects": [
        {
            "type": "attack-pattern",
            "spec_version": "2.1",
            "id": "attack-pattern--7e30b889-c9f9-4932-aa0d-82d5f1d79e45",
            "created_by_ref": "identity--3529d4d3-6f11-49ed-afce-8b59dd90d796",
            "created": "2022-07-02T19:59:12.659319Z",
            "modified": "2022-07-02T19:59:12.659319Z",
            "name": "Create Sockpuppet Accounts",
            "description": "Sockpuppet accounts refer to falsified accounts that either promote the influence operation\u2019s  own material or attack critics of the material online. Individuals who control sockpuppet  accounts also man at least one other user account.67 Sockpuppet accounts help legitimize  operation narratives by providing an appearance of external support for the material and  discrediting opponents of the operation. ",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "mitre-attack",
                    "phase_name": "establish-social-assets"
                }
            ],
            "external_references": [
                {
                    "source_name": "DISARM",
                    "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0090.004.md",
                    "external_id": "T0090.004"
                }
            ],
            "object_marking_refs": [
                "marking-definition--f0ca3c70-6890-4d7f-b6f9-ca0d932f2b93"
            ],
            "x_mitre_is_subtechnique": true,
            "x_mitre_platforms": [
                "Windows",
                "Linux",
                "Mac"
            ],
            "x_mitre_version": "1.0"
        }
    ]
}
